Rocky 8.x Zimbra Connect to Zimbra internal LDAP externally
From Notes_Wiki
Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally
To connect to Zimbra LDAP externally:
- Enable access to server via network firewall (OR Cloud firewall)
- Enable access to port 389 of Zimbra server via firewalld:
- firewall-cmd --zone=public --add-port=389/tcp --permanent
- firewall-cmd --reload
- Then test connectivity to Zimbra LDAP via:
- ldapsearch -x -h <email-server-fqdn-or-ip>:389 -b 'dc=example,dc=com' -D 'uid=saurabh,ou=people,dc=example,dc=com' -W dn,mail
- In above replace username saurabh and domain example.com appropriately. Zimbra LDAP will require authentication for the DN specified with -D, without which it does not responds to ldap queries
- In case of confusion on Zimbra LDAP structure we can use:
- su - zimbra
- /opt/zimbra/libexec/zmslapcat -c /tmp
- vim /tmp/ldap.bak
- For filters while connecting to Zimbra. See
Various fields while connecting to Zimbra LDAP externally
- Host
- mail.example:389
- Base DN
- dc=example,dc=com
- Auth DN
- uid=saurabh,ou=people,dc=example,dc=com
- Password
- secret
- User Object Class
- zimbraAccount
- Username
- mail OR uid
- User Filter
- (&(uid=*)(mail=*))
To search for specific user we can use uid=saurabh or mail=saurabh@example.com etc. filters
There are no user groups in Zimbra by default. For grouping use custom groups in application and manually add users to specific groups.
Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally